$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft File: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft (raw, json) Hash identifier: z0Zz6xYKsZ+0ZvVqPydb0Yzz5bYNJjFkdoE07nsSPwA= Subject key identifier: D7:D1:CE:F3:5E:99:FD:4E:9A:1B:AF:3A:D1:7D:FD:E6:E8:67:10:DD Authority key identifier: A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA Certificate issuer: /CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft Manifest number: 0132 Signing time: Fri 25 Apr 2025 03:38:11 +0000 Manifest this update: Fri 25 Apr 2025 03:38:11 +0000 Manifest next update: Fri 02 May 2025 03:38:11 +0000 Files and hashes: 1: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl (hash: RkaOGOhtiim95PpbWIA0P8wKNO3WXcT+3zyHKRL4Rd8=) 2: 599F65C652C011EEAAE0CD34C4F9AE02.roa (hash: RkTUA678ggeVul1y+nwQF7cmzTi/KyCvH3jL9UTL73c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5804, serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Validity Not Before: Apr 25 03:38:11 2025 GMT Not After : May 2 03:38:11 2025 GMT Subject: CN=680b03a3-881c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ff:43:e3:dd:64:82:59:cd:4c:58:86:a1:e1: c5:b4:c4:af:56:f4:9d:07:13:08:47:3b:6c:44:64: af:4c:b3:58:ce:b2:e0:c8:66:be:2a:11:d3:a3:0e: d3:f6:20:ce:8f:8a:23:ee:50:2b:71:6d:2d:0a:3a: 06:fa:e8:88:30:85:67:fe:bb:44:ab:ef:2e:c0:31: 75:92:63:75:b1:94:94:f3:f8:81:70:d3:86:92:dc: bb:2f:91:5f:35:1c:c7:38:5a:8a:cd:d1:c6:35:41: 94:73:87:d6:1e:ce:77:0a:ad:62:57:93:ff:87:e0: 29:ab:1d:ec:b4:bf:7c:d7:3c:d5:c9:2c:0a:f1:7a: ad:27:28:49:c8:7b:92:b1:59:e0:ad:d5:b8:0a:b9: 0d:d2:7d:62:43:85:f4:1d:7f:0a:83:72:de:ce:3e: 76:c3:ca:4a:6c:8b:ca:cf:5c:8a:83:db:eb:19:86: 83:a0:f5:b0:fe:f4:2c:c5:86:22:2b:7a:91:49:00: f9:bd:ad:6f:35:4b:64:1d:0d:77:97:6e:3c:42:96: 4d:e7:85:79:59:01:72:cf:0c:3d:a4:1f:0f:36:67: 62:f3:1b:77:9b:c3:2b:e6:51:b7:4d:d2:40:fd:be: 4c:a5:de:f3:82:60:5a:e0:ea:30:67:af:7e:00:c8: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D1:CE:F3:5E:99:FD:4E:9A:1B:AF:3A:D1:7D:FD:E6:E8:67:10:DD X509v3 Authority Key Identifier: keyid:A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9c:93:f5:23:42:92:8e:43:78:c6:c0:38:72:cd:b0:e6:4b: f6:11:f8:22:24:58:3b:0f:cb:cb:33:38:d7:f0:97:f2:7f:9d: 57:0f:68:6f:f3:06:46:43:6c:2c:da:27:11:99:46:7a:94:c1: 2b:f3:0c:f7:dd:aa:be:f0:1d:cb:27:38:9e:05:4e:7f:60:22: 75:18:8b:b8:7d:cc:3a:cc:1c:22:a0:29:c4:9b:b7:8a:25:a6: e9:d8:2f:9c:b4:c8:81:b4:b8:82:4d:f3:33:06:d4:3f:83:c7: 16:45:22:14:d7:d5:7e:25:25:8a:57:a5:9c:1b:b4:e8:14:d6: 50:0a:53:64:98:4f:73:1e:01:76:22:29:fb:43:e0:bc:cf:be: 7d:f7:14:ea:8d:6b:19:b0:4a:ad:ff:1b:14:be:3e:d1:14:05: b8:28:c8:6f:62:3d:c5:48:08:6a:2a:70:1f:73:b1:77:b2:c1: d5:36:d0:47:ea:f9:64:81:ea:89:9f:c0:f3:9b:e3:f6:74:88: 3e:ba:89:82:2a:9f:5c:32:26:4b:a3:44:09:3b:fa:f9:1c:53: 65:84:1f:d8:fb:0c:89:33:e6:80:e5:fa:57:31:a8:00:b7:db: a0:cd:e4:04:97:38:21:9b:d5:a1:eb:17:fc:01:55:60:f9:c5: 50:d5:ae:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4MDQxMTAvBgNVBAUTKEEwRkE2NkY2OTM0QUEyODEzRTFBMUYwMDczOTU5MEM2 MzU3RDQwREEwHhcNMjUwNDI1MDMzODExWhcNMjUwNTAyMDMzODExWjAYMRYwFAYD VQQDEw02ODBiMDNhMy04ODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3P9D491kglnNTFiGoeHFtMSvVvSdBxMIRztsRGSvTLNYzrLgyGa+KhHTow7T 9iDOj4oj7lArcW0tCjoG+uiIMIVn/rtEq+8uwDF1kmN1sZSU8/iBcNOGkty7L5Ff NRzHOFqKzdHGNUGUc4fWHs53Cq1iV5P/h+Apqx3stL981zzVySwK8XqtJyhJyHuS sVngrdW4CrkN0n1iQ4X0HX8Kg3Lezj52w8pKbIvKz1yKg9vrGYaDoPWw/vQsxYYi K3qRSQD5va1vNUtkHQ13l248QpZN54V5WQFyzww9pB8PNmdi8xt3m8Mr5lG3TdJA /b5Mpd7zgmBa4OowZ69+AMi/sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfRzvNe mf1OmhuvOtF9/eboZxDdMB8GA1UdIwQYMBaAFKD6ZvaTSqKBPhofAHOVkMY1fUDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgwNC9DMjEzOEQ0MDUy QkYxMUVFOEU0NEFBMUJDNEY5QUUwMi9vUHBtOXBOS29vRS1HaDhBYzVXUXhqVjlR Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29QcG05cE5Lb29FLUdoOEFjNVdReGpWOVFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTgwNC9DMjEzOEQ0MDUyQkYxMUVFOEU0NEFBMUJDNEY5QUUwMi9vUHBtOXBOS29v RS1HaDhBYzVXUXhqVjlRTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnnJP1I0KSjkN4xsA4cs2w5kv2EfgiJFg7D8vLMzjX8Jfyf51XD2hv 8wZGQ2ws2icRmUZ6lMEr8wz33aq+8B3LJzieBU5/YCJ1GIu4fcw6zBwioCnEm7eK Jabp2C+ctMiBtLiCTfMzBtQ/g8cWRSIU19V+JSWKV6WcG7ToFNZQClNkmE9zHgF2 Iin7Q+C8z7599xTqjWsZsEqt/xsUvj7RFAW4KMhvYj3FSAhqKnAfc7F3ssHVNtBH 6vlkgeqJn8Dzm+P2dIg+uomCKp9cMiZLo0QJO/r5HFNlhB/Y+wyJM+aA5fpXMagA t9ugzeQElzghm9Wh6xf8AVVg+cVQ1a7m -----END CERTIFICATE-----Generated at Sat Apr 26 13:08:30 2025 by rpki-client